A network administrator is configuring a BVI interface on a routed FTD. The administrator wants to isolate traffic on the interfaces connected to the bridge group and not have the FTD route this…

Question

Options

• AA new VRF must be created for the BVI interface
• BAn IP address must be configured on the BVI
• CIP routing must be removed from the physical interfaces connected to the BVI
• DThe BVI interface must be configured for transparent mode

• A
  80% (36)
• B
  11% (5)
• C
  2% (1)
• D
  7% (3)

Explanation

On a routed FTD, a BVI (Bridge Virtual Interface) with an IP address participates in the global routing table by default, meaning the FTD will route traffic between the bridge group and other interfaces. To isolate the BVI so the FTD does not route bridge group traffic into the rest of the network using the global routing table, a new VRF (Virtual Routing and Forwarding) instance must be created and assigned to the BVI interface (A). This creates a separate routing domain, effectively isolating the bridge group traffic from all other interfaces. Assigning an IP to the BVI (B) is standard practice but does not provide isolation. Removing IP routing from physical interfaces (C) would break connectivity. The BVI interface itself cannot be set to transparent mode (D) on a routed FTD.

No community discussion yet for this question.